Detections
Analytics
CVE-2018-5304
medium
Description
An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The affected web interface is vulnerable to ClickJacking or UI Redressing: it is possible to access the web application in an iframe, and clicking on the iframe will redirect to a third-party application or perform other malicious actions.
References
http://blog.isecurion.com/2018/05/09/impinj-speedway-r420-rfid-reader/